Published: 14/03/2006 Updated: 18/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote malicious users to inject arbitrary web script or HTML via the (1) ArtCat parameter to wmview.php, (2) ctrrowcol parameter to footer.php, or (3) ArtID parameter to wmcomments.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mikael software wmnews

source: wwwsecurityfocuscom/bid/17076/info WMNews is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context o ...

source: wwwsecurityfocuscom/bid/17076/info WMNews is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of ...

source: wwwsecurityfocuscom/bid/17076/info WMNews is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context ...

NVD-CWE-Other http://biyosecurity.be/bugs/wmnews.txt http://www.securityfocus.com/bid/17076 http://secunia.com/advisories/19204 http://www.osvdb.org/23840 http://www.osvdb.org/23841 http://www.osvdb.org/23842 http://www.vupen.com/english/advisories/2006/0939 https://exchange.xforce.ibmcloud.com/vulnerabilities/25210 http://www.securityfocus.com/archive/1/427479/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27416/

CVE-2006-1233

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect